JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.84.162.242

98.84.162.242 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-98-84-162-242.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.84.162.242

Whois 98.84.162.242

IP Abuse Reports for 98.84.162.242:

This IP address has been reported a total of 51 times from 40 distinct sources. 98.84.162.242 was first reported on August 27th 2026, and the most recent report was 24 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-29 04:32:27 (24 minutes ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇪🇸 el-brujo	2026-08-29 03:56:44 (1 hour ago)	Cloudflare WAF: Request Path: /@fs/proc/self/cwd/.env Request Query: ?raw?? Host: foro.elhacker.net ... show more Cloudflare WAF: Request Path: /@fs/proc/self/cwd/.env Request Query: ?raw?? Host: foro.elhacker.net userAgent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot) Action: block Source: firewallManaged ASN Description: Amazon.com, Inc. Country: US Method: GET Timestamp: 2026-08-29T03:56:44Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇪🇸 elcruzado.es	2026-08-29 02:50:14 (2 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 98.84.162.242 (US/United States/ec2-98- ... show more (mod_security) mod_security triggered on hostname [redacted] 98.84.162.242 (US/United States/ec2-98-84-162-242.compute-1.amazonaws.com) show less	SQL Injection
🇮🇳 evicky2002	2026-08-29 00:00:42 (4 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 LRob	2026-08-28 22:53:41 (6 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /asset-manifest.json \| 2026-08-28 22:53 UTC show less	Hacking Web App Attack
🇪🇸 alferez	2026-08-28 20:03:13 (8 hours ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
Anonymous	2026-08-28 19:51:38 (9 hours ago)	98.84.162.242 - - [28/Aug/2026:21:51:14 +0200] "GET /dist/.vite/manifest.json HTTP/1.1" 404 30310 98 ... show more 98.84.162.242 - - [28/Aug/2026:21:51:14 +0200] "GET /dist/.vite/manifest.json HTTP/1.1" 404 30310 98.84.162.242 - - [28/Aug/2026:21:51:16 +0200] "GET /graphql HTTP/1.1" 404 28769 98.84.162.242 - - [28/Aug/2026:21:51:19 +0200] "GET /api/graphql HTTP/1.1" 404 30164 98.84.162.242 - - [28/Aug/2026:21:51:23 +0200] "GET /v1/graphql HTTP/1.1" 404 30334 98.84.162.242 - - [28/Aug/2026:21:51:34 +0200] "GET /signup HTTP/1.1" 404 30215 98.84.162.242 - - [28/Aug/2026:21:51:34 +0200] "GET /console HTTP/1.1" 404 30363 98.84.162.242 - - [28/Aug/2026:21:51:34 +0200] "GET /backoffice HTTP/1.1" 404 30218 98.84.162.242 - - [28/Aug/2026:21:51:35 +0200] "GET /user/login HTTP/1.1" 404 30243 98.84.162.242 - - [28/Aug/2026:21:51:35 +0200] "GET /forgot-password HTTP/1.1" 404 30341 98.84.162.242 - - [28/Aug/2026:21:51:35 +0200] "GET /users/login HTTP/1.1" 404 28753 ... show less	Web Spam Web App Attack
🇺🇸 nodepile	2026-08-28 18:15:22 (10 hours ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Macintosh ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇮🇩 sockominfo	2026-08-28 18:00:53 (10 hours ago)	Active Response: IP Blocked via Firewall Drop, User access to sensitive menu during non-business ho ... show more Active Response: IP Blocked via Firewall Drop, User access to sensitive menu during non-business hours.. Threat Score: 5.6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 68%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-28 17:00:09 (11 hours ago)	User access to sensitive menu during non-business hours.. Threat Score: 7.2/10 (HIGH). Reported by T ... show more User access to sensitive menu during non-business hours.. Threat Score: 7.2/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇧🇪 Ivo Vynckier	2026-08-28 15:37:00 (13 hours ago)	98.84.162.242 - - [27/Aug/2026:15:03:40 +0200] "GET /config.json HTTP/2.0" 404 2310 "-" "Mozilla/5.0 ... show more 98.84.162.242 - - [27/Aug/2026:15:03:40 +0200] "GET /config.json HTTP/2.0" 404 2310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 98.84.162.242 - - [27/Aug/2026:15:03:40 +0200] "GET /wp-json HTTP/2.0" 404 2310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 98.84.162.242 - - [27/Aug/2026:15:03:40 +0200] "GET /config.js HTTP/2.0" 404 2310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" show less	Web App Attack
🇮🇪 Jim Keir	2026-08-28 14:48:48 (14 hours ago)	2026-08-28 14:48:47 98.84.162.242 File scanning, blocking 98.84.162.242 for 5 minutes	Web App Attack
🇮🇪 Jim Keir	2026-08-28 13:58:17 (14 hours ago)	2026-08-28 13:58:16 98.84.162.242 File scanning, blocking 98.84.162.242 for 5 minutes 2026-08-28 13: ... show more 2026-08-28 13:58:16 98.84.162.242 File scanning, blocking 98.84.162.242 for 5 minutes 2026-08-28 13:58:16 98.84.162.242 File scanning, blocking 98.84.162.242 for 5 minutes 2026-08-28 13:58:16 98.84.162.242 File scanning, blocking 98.84.162.242 for 5 minutes show less	Web App Attack
🇳🇱 Site.eu	2026-08-28 13:48:46 (15 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Skyrider	2026-08-28 13:40:23 (15 hours ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.127.148.6

🇦🇷 186.13.113.72

🇺🇸 165.154.173.83

🇰🇷 162.158.138.143

🇺🇸 153.66.59.225

🇺🇸 144.202.92.17

🇩🇪 144.31.81.91

🇺🇸 113.20.0.58

🇦🇱 81.26.204.144

10.46.181.202

🇨🇳 221.198.81.139

🇷🇴 193.46.255.86

🇨🇱 186.105.204.185

🇳🇱 185.242.226.11

🇺🇸 173.239.240.220

🇨🇳 101.71.211.112

🇳🇱 45.154.98.128

🇺🇸 35.89.234.220

🇨🇳 14.153.32.101

🇧🇷 187.86.170.81